Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

Grupo Herradura Occidente

herradura.mx

Grupo Herradura Occidente was listed on the Imncrew leak site on May 5, 2025. Information as of Oct 19, 2026.

Country: MexicoIndustry: Unknown
Updated continuously · figures as of Oct 19, 2026
Claimed by
Imncrew
First listed
May 5, 2025
Claims recorded
1

Leak-Site Claim.

ImncrewConfirmed claim
Posted on the leak site
May 5, 2025
Collected by Brandefense
Jul 11, 2025
Data claimed
Not stated
Leak-site post text, written by the group
Grupo Herradura Occidente is a Mexican transportation company formed in 2007 through the merger of two long-established companies: Autotransportes Herradura de Plata (founded in 1945) and Grupo Occidente (founded in 1956). This fusion aimed to create a more profitable, productive, and efficient organization capable of facing financial and global changes at that time. The company operates a modern fleet of over 780 buses, including brands like Volvo, Mercedes Benz, and MAN, and transports more than 20 million passengers annually. It offers three service modalities: Plus, economic, and…

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
Jansenfurniture.com
jansenfurniture.com
ImncrewCACanadaUnknownNot stated
Onegolditalia.it
onegolditalia.it
ImncrewITItalyUnknownNot stated
Asia Pacific Network
apntelecom.com
ImncrewUSUnited StatesTechnology, TelecommunicationsNot stated
RepreMundo
repremundo.com.co
ImncrewCOColombiaUnknownNot stated
Stiga.com
stiga.com
ImncrewFRFranceRetailNot stated
Synthesia.com
synthesia.com
ImncrewCZCzechiaManufacturing, ConstructionNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.